Tcpdump Libpcap
8 CVEs affecting Tcpdump Libpcap. Latest disclosed: 2024-08-31. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2011-1935 | Critical | 9.8 | 2017-10-20 | pcap-linux.c in libpcap 1.1.1 before commit ea9432fabdf4b33cbc76d9437200e028f1c47c93 when snaplen is set may truncate packets, which might allow remote attacke… |
CVE-2019-15163 | High | 7.5 | 2019-10-03 | rpcapd/daemon.c in libpcap before 1.9.1 allows attackers to cause a denial of service (NULL pointer dereference and daemon crash) if a crypt() call fails. |
CVE-2019-15165 | Medium | 5.3 | 2019-10-03 | sf-pcapng.c in libpcap before 1.9.1 does not properly validate the PHB header length before allocating memory. |
CVE-2019-15164 | Medium | 5.3 | 2019-10-03 | rpcapd/daemon.c in libpcap before 1.9.1 allows SSRF because a URL may be provided as a capture source. |
CVE-2019-15162 | Medium | 5.3 | 2019-10-03 | rpcapd/daemon.c in libpcap before 1.9.1 on non-Windows platforms provides details about why authentication failed, which might make it easier for attackers to… |
CVE-2019-15161 | Medium | 5.3 | 2019-10-03 | rpcapd/daemon.c in libpcap before 1.9.1 mishandles certain length values because of reuse of a variable. This may open up an attack vector involving extra data… |
CVE-2024-8006 | Medium | 4.4 | 2024-08-31 | Remote packet capture support is disabled by default in libpcap. When a user builds libpcap with remote packet capture support enabled, one of the functions t… |
CVE-2023-7256 | Medium | 4.4 | 2024-08-31 | In affected libpcap versions during the setup of a remote packet capture the internal function sock_initaddress() calls getaddrinfo() and possibly freeaddrinfo… |